openSIS SQL Injection Vulnerability (CNVD-2022-03913)

openSIS is an open source student information management system from Open Solutions for Education. openSIS is vulnerable to a SQL injection vulnerability that originates in /opensis/modules/grades/InputFinalGrades.php due to a lack of validation of external input SQL statement validation. An...